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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of 
claims in the application: 

Listing of Claims: 

1. (currently amended) A method of processing out-of-order 
messages, comprising: 

determining a largest nonce value yet seen from a plurality of 
nonce values of out-of-order messages; 

comparing a nonce value of a received out-of-order message with 
said largest nonce value yet seen; 

comparing said nonce value to an acceptance window in response 
to said nonce value not exceeding said largest nonce value yet seen; 

adjust i ng increasing a size of a range of acceptable nonce values 
within said acceptance window, where fee said size of said range is based on 
said largest nonce value yet seen; and 

rejecting said received out-of-order message if i n r e spons e to said 
nonce value fa lli ng falls outside said acceptance window. 

2. (currently amended) The method according to claim 1, further 

comprising: 

designating said nonce value as said largest nonce value yet seen 
i n r es pons e to if said nonce value e xc ee d i ng exceeds said largest nonce value 
yet seen. 

3. (currently amended) The method according to claim 1, further 

comprising: 

replacing said largest nonce value yet seen with said nonce value 
i n r e spons e to jf said nonce value e xc ee d i ng exceeds said largest nonce value 
yet seen. 
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4. (currently amended) The method according to claim 1, further 

comprising: 

adjust i ng increasing af* said acceptance window if basod on said 
nonce value e xc ee d i ng exceeds said largest nonce value yet seen. 

5. (previously presented) The method according to claim 1, further 

comprising: 

designating said received out-of-order message as a replay attack. 

6. (currently amended) The method according to claim 1, further 

comprising: 

comparing said nonce value to a window mask value if i n r es pons e 
te said nonce value fa lli ng falls within said acceptance window; and 

rejecting said received out-of-order message if i n rosponso to a& 
outcom e of s a i d compar i son of said nonce value is within to said window mask 
value b ei ng tru e. 

7. (previously presented) The method according to claim 6, further 

comprising: 

designating said received out-of-order message as part of a replay 

attack. 

8. (currently amended) The method according to claim 1, further 

comprising: 

comparing said nonce value to a window mask value if i n r e spon se 
te said nonce value fal li ng falls within said acceptance window; and 

accepting said received out-of-order message if in r e spon se to an 
outcomo of said compar i son of said nonce value is outside te said window mask 
value b ei ng fa l s e. 
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9. (previously presented) The method according to claim 8, further 

comprising: 

designating said nonce value as a largest nonce value yet seen. 

10. (currently amended) An apparatus for processing out-of-order 
messages, said apparatus comprising: 

a communication interface configured to transmit and receive a 
plurality of packets; and 

a controller, wherein said controller is configured to: 

determine a largest nonce value yet seen from a plurality of 
nonce values of out-of-order messages; 

compare a nonce value of a received out-of-order message 
and said largest nonce value yet seen; 

compare said nonce value to an acceptance window in 
response to said nonce value not exceeding said largest nonce 
value yet seen; 

adjust increase a size of a range of acceptable nonce values 
within said acceptance window, where the said size of said range is 
based on said largest nonce value yet seen; and 

reject said received out-of-order message if i n r e spons e to 
said nonce value fa lli ng falls outside said acceptance window. 

11. (currently amended) The apparatus according to claim 10, 

wherein: 

said controller is further configured to designate said nonce value 
as said largest nonce value yet seen if i n r e spons e to said nonce value 
oxcooding exceeds said largest nonce value yet seen. 
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12. (currently amended) The apparatus according to claim 10, 

wherein: 

said controller is further configured to adjust increase an 
acceptance window if i n r e spons e to said largest nonce value yet seen m 
r es pons e to s a i d nonc e va l ue e xc ee d i ng exceeds said largest nonce value yet 
seen. 

13. (currently amended) The apparatus according to claim 10, 

wherein: 

said controller is further configured to replace said largest nonce 
value yet seen with said nonce value if i n r e sponse to said nonce value 
e xc ee d i ng exceeds said largest nonce value yet seen. 

14. (previously presented) The apparatus according to claim 10, 

wherein: 

said controller is further configured to designate said received out- 
of-order message as part of a replay attack. 

15. (currently amended) The apparatus according to claim 10, 
wherein said controller is further configured to: 

compare said nonce value to a window mask value if i n rosponso to 
said nonce value fa lli ng falls within said acceptance window; and 

reject said received out-of-order message if said nonce value falls 
outside said acceptance window i n r e spons e to an outcom e of said compar i son 
of 6 aid nonc e va l u e to sa i d w i ndow ma6k va l u e b ei ng tru e. 

16. (previously presented) The apparatus according to claim 15, 

wherein: 

said controller is further configured to designate said received out- 
of-order message as part of a replay attack. 



- 5 - 



LAGIMONIER et al. - Appln. No. 09/932,982 



17. (currently amended) The apparatus according to claim 10, 
wherein said controller is configured to: 

compare said nonce value to a n acceptance window w i ndow mask 
value if in r e spons e to said nonce value fa lli ng falls within said acceptance 
window; and 

accept said received out-of-order message if said nonce value falls 
within said acceptance window in r e spons e to an outcom e of sa i d compar i ng of 
sa i d nonc e va l u e to s a i d w i ndow mask va l u e b ei ng fa l s e. 

18. (previously presented) The apparatus according to claim 17, 

wherein: 

said controller is further configured to mark said nonce value as 
said largest nonce value yet seen. 

19. (currently amended) A computer readable storage medium on 
which is embedded one or more computer programs, said one or more computer 
programs implementing a method of processing out-of-order messages, said one 
or more computer programs comprising a set of instructions for: 

determining a largest nonce value yet seen from a plurality of 
nonce values of out-of-order messages; 

comparing a nonce value of a received out-of-order message and 
said largest nonce value yet seen; 

comparing said nonce value to an acceptance window in response 
to said nonce value not exceeding said largest nonce value yet seen; 

adjust i ng increasing a size of a range of acceptable nonce values 
within said acceptance window, where the said size of said range is based on 
said largest nonce value yet seen; and 

rejecting said received out-of-order message if i n r e spons e to said 
nonce value not fa lli ng falls within said acceptance window. 
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20. (currently amended) The computer readable storage medium in 
according to claim 19, said one or more computer programs further comprising a 
set of instructions for: 

designating said nonce value as said largest nonce value yet seen 
if i n r e spons e to said nonce value e xce e d i ng exceeds said largest nonce value 
yet seen. 

21. (currently amended) The computer readable storage medium in 
according to claim 19, said one or more computer programs further comprising a 
set of instructions for: 

replacing said largest nonce value yet seen with said nonce value if 
i n r e spons e to said nonce value e xc ee d i ng exceeds said largest nonce value yet 
seen. 

22. (currently amended) The computer readable storage medium in 
according to claim 19, said one or more computer programs further comprising a 
set of instructions for: 

adjust i ng increasing an acceptance window based on said nonce 
value if in r e spons e to said nonce value e xc ee ding exceeds said largest nonce 
value yet seen. 

23. (previously presented) The computer readable storage medium 
in according to claim 19, said one or more computer programs further comprising 
a set of instructions for: 

designating said received out-of-order message as a replay attack. 
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24. (currently amended) The computer readable storage medium in 
according to claim 19, said one or more computer programs further comprising a 
set of instructions for: 

comparing said nonce value to a window mask value if in r es pon se 
te said nonce value fa lli ng falls within said acceptance window; and 

rejecting said received out-of-order message if said nonce value 
falls outside said acceptance window i n respons e to an outcomo of said 
compar i son of sa i d nonc e va l u e to sa i d w i ndow ma 6 k va l u e b ei ng tru e. 

25. (previously presented) The computer readable storage medium 
in according to claim 24, said one or more computer programs further comprising 
a set of instructions for: 

designating said received out-of-order message as part of a replay 

attack. 

26. (currently amended) The computer readable storage medium in 
according to claim 19, said one or more computer programs further comprising a 
set of instructions for: 

comparing said nonce value to a window mask value if in r e spons e 
to said nonce value fa lli ng falls within said acceptance window; and 

accepting said received out-of-order message if said nonce value 
falls within said acceptance window i n r e spons e to an outcom e of sa i d compar i ng 
of sa i d nonc e va l u e to sa i d w i ndow mask va l u e b e ing fa l s e. 

27. (previously presented) The computer readable storage medium 
in according to claim 26, said one or more computer programs further comprising 
a set of instructions for: 

designating said nonce value as said largest nonce value yet seen. 
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28. (currently amended) A system for processing out-of-order 
messages in a peer-to-peer configuration, comprising: 

a first peer configured to provide secure communication; 

a second peer configured to provide said secure communication; 

and 

a secure communication module configured to be executed by said 
first peer and second peer, wherein said secure communication module is 
configured to: 

determine a largest nonce value yet seen from a plurality of 
nonce values of a out-of-order messages; 

compare a nonce value to a filter in response to said nonce 
value of a received out-of-order packet not exceeding said largest 
nonce value yet seen; 

compare said nonce value to a replay mask; 

adjust increase a size of a range of acceptable nonce values 
within said acceptance window, where the said size of said range is 
based on said largest nonce value yet seen; and 

accept said received out-of-order packet if said nonce value 
falls within said replay mask i n r e spons e to said comparison of sa i d 
nonc e va l u e and 6 a i d r e play mask b ei ng fa l s e. 

29. (currently amended) The system according to claim 28, 

wherein: 

said secure communication module is further configured to 
designate said nonce value as said largest nonce value yet seen if i n r e spons e to 
said nonce value e xc ee d i ng exceeds said largest nonce value yet seen. 
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30. (currently amended) The system according to claim 28, 

wherein: 

said secure communication module is further configured to adjust 
increase said filter based on said largest nonce value yet seen if i n r e spon se to 
said nonce value e xceoding exceeds said largest nonce value yet seen. 

31. (currently amended) The system according to claim 28, 

wherein: 

said secure communication module is further configured to reject 
said received out-of-order packet if i n r e spons e to said nonce value falls fa lli ng 
outside said filter. 

32. (previously presented) The system according to claim 31, 

wherein: 

said secure communication module is further configured to 
designate said received out-of-order packet as part of a replay attack. 

33. (currently amended) The system according to claim 32, 

wherein: 

said secure communication module is further configured to reject 
said received out-of-order packet if i n r e spons e to sa i d compar i son of said nonce 
value and falls outside said replay mask b ei ng tru e. 

34. (previously presented) The system according to claim 33, 

wherein: 

said secure communication module is further configured to 
designate said received out-of-order packet as part of a replay attack. 
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35. (currently amended) The system according to claim 28, 

wherein: 

said secure communication module is further configured to reject 
said received out-of-order packet jf in rosponso to said nonce value fa il s to fa ll 
falls outside w i th i n said filter; and 

said secure communication module is further configured to 
designate said received out-of-order packet as part of a replay attack. 

36. (currently amended) An interceptor device for processing out- 
of-order messages, said interceptor device comprising: 

a network interface; 

an expected sequence register configured to enumerate an 
expected sequence number of a packet received out-of-order from a second 
network device; 

a memory configured to store a replay mask; and 
a controller, wherein said controller is configured to: 

determine a largest nonce value yet seen from a plurality of 
nonce values of out-of-order messages; 

compare a nonce value to a filter in response to a sequence 
number of a received out-of-order packet via said network interface 
does not exceed said largest nonce value yet seen retrieved from 
said expected sequence register; 

compare said sequence number to said replay mask 
retrieved from said memory; 

adjust increase a size of a range of acceptable nonce values 
within said replay mask a cc e ptanc e w i ndow , where the said size of 
said range is based on said largest nonce value yet seen; and 

accept said received out-of-order packet if i n r e sponso to 
sa i d compar i son of said sequence number a«4 falls within said 
replay mask is fa l s e. 
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37. (currently amended) The interceptor device according to claim 

36, wherein: 

said controller is further configured to designate said sequence 
number as said largest nonce value yet seen if i n r es pons e to said sequence 
number oxcood i ng exceeds said largest sequence number yet seen. 

38. (currently amended) The interceptor device according to claim 

36, wherein: 

said controller is further configured to adjust increase said filter 
based on said largest nonce value yet seen if i n r e spons e to said sequence 
number oxcooding exceeds said largest nonce value yet seen. 

39. (currently amended) The interceptor device according to claim 

36, wherein: 

said controller is further configured to reject said received out-of- 
order packet if i n respons e to said sequence number falls fal l ing outside said 
filter. 

40. (previously presented) The interceptor device according to 
claim 36, wherein: 

said controller is further configured to designate said received out- 
of-order packet as part of a replay attack. 

41. (currently amended) The interceptor device according to claim 

36, wherein: 

said controller is further configured to reject said received out-of- 
order packet if i n r e spons e to sa i d comparison of said sequence number falls 
outside aed-said replay mask bo i ng truo . 
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42. (previously presented) The interceptor device according to 
claim 41, wherein: 

said controller is further configured to designate said received out- 
of-order packet as part of a replay attack. 

43. (currently amended) The interceptor device according to claim 

36, wherein: 

said controller is further configured to reject said received out-of- 
order packet if i n rosponso to said sequence number falls fa lli ng outside said 
filter; and 

said controller is further configured to designate said received out- 
of-order packet as part of a replay attack. 
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